Candy AI Scam? No. But Read the Token Model First

Candy AI is not a scam. It is operated by EverAI Limited, a registered business in Malta, running since around 2023, and it delivers the features it advertises. Security scans come back clean and the company has a verifiable registration.

That said, there are hundreds of genuine complaints about it, and they cluster around three things: a token system that makes the advertised price misleading, a 24-hour refund window, and cancellation that people find harder than it should be. Those are real problems. They are not fraud, and the distinction matters if you are deciding what to do next.

Why “EverAI” Is on Your Card Statement

Start here, because a lot of people searching this term are looking at an unfamiliar charge.

The billing descriptor may appear as EverAI rather than Candy AI. If you signed up and then saw a payment from a company name you did not recognise, that is almost certainly the explanation rather than card fraud.

Check the email address on your payment receipt before doing anything else. It is common for people to have two accounts, one from a free test and one they actually paid on, and to be logged into the wrong one while insisting they have no subscription.

The Token System Is the Actual Complaint

The advertised prices are real and they are low. Around $3.99 per month on the twelve-month plan, $13.99 monthly, and roughly $5.99 weekly.

They are also incomplete. The subscription does not include the image generation, voice calls, or Live Action features that most people signed up for. Those run on tokens, bought separately.

A single image costs roughly one to three tokens depending on complexity. Voice calls burn through them considerably faster. Reddit threads on r/Chatbots tracking real spending report heavy image users landing somewhere between $50 and $300 per month once token packs are counted.

So someone budgeting $3.99 and spending $180 has not been defrauded. They bought something they did not understand. The recurring theme across reviews is exactly that: users not realising what they would be charged until the bill arrived.

One more detail worth knowing before you subscribe. Unused subscription tokens may expire when your paid access ends, so buying a large pack shortly before cancelling is a way to lose money.

Refunds Are Tight

For many non-EU and non-UK purchases, the published refund window is 24 hours, with usage limits attached. Use the service meaningfully within that window and you may lose eligibility.

Regional rights differ, and this is worth knowing. EU and UK consumers have statutory cancellation rights that a company’s published policy does not override, though digital services you have started using carry their own exceptions. If you are in either territory, look up your own consumer rights rather than accepting the site’s window as final.

Support responsiveness is the other half of the problem. Reviewers describe refund requests going unanswered, and one described waiting a full month for a reply. On PissedConsumer, complaints about double charges and billing errors come up repeatedly alongside reports of no reliable refund processing.

There is also a structural risk indicator here. Independent checks note the site displays no contact email or physical address. That is not evidence of fraud, but it does mean your only route to a human runs through whatever support form the platform provides.

How to Cancel Properly

Most of the anger in this category comes from people who thought they cancelled and did not.

1. Cancel the subscription first. Do not delete your account. Deleting an account does not necessarily stop billing, and once it is gone you have lost the interface where you could have cancelled.
2. Log in using the email on your payment receipt. If your paid plan is not visible, log out fully and log back in with that address.
3. Find account settings, then billing or manage plan. Follow the flow until you see an explicit confirmation, not just a page that looks like it worked.
4. Screenshot the confirmation. Save the email too. This is your evidence if a charge appears anyway.
5. Then delete the account, if you want to, once cancellation is confirmed.

Cancellation ends renewal but normally leaves access running until the end of the period you have paid for. At least one Trustpilot reviewer reported being unable to stop the next billing cycle without surrendering the account immediately, so read the flow carefully rather than clicking through it.

Two warnings. Third-party cancellation services rank well for this search because the intent is obvious, and you almost never need them. And a chargeback is the escalation step, not the first move. Try the official route, keep your proof, and go to your card issuer only if the merchant fails to resolve a legitimate billing issue.

The same discipline applies to any subscription, and our walkthrough on cancelling a ChatGPT subscription covers the same pattern of confirm-then-document.

The Privacy Question Is Less Settled

This one deserves more weight than it usually gets, given what people type into these services.

Reviewers have criticised the privacy policy for lacking clarity on how conversations are stored, how long data is retained, and whether users can permanently delete it. Those are basic questions and the answers should be easy to find.

Treat anything you send as potentially retained. That is sensible advice for any AI companion platform, and more so for one where the conversation content is by design intimate.

Why the Ratings Contradict Each Other

You will find wildly different scores depending on where you look, and the gap is worth explaining rather than picking whichever number suits your argument.

PissedConsumer exists for people with a grievance, so it self-selects heavily, and twelve reviews is a tiny sample. Trustpilot’s larger set is the more representative picture, and 3.8 describes a service that satisfies most users while badly disappointing a meaningful minority.

An independent site safety scan found zero detections across antivirus networks and browser blocklists, valid SSL, a domain registered in 2017, and an active Malta business registration. Its own summary still recommends caution because of the refund and token complaints, which is a fair reading.

Frequently Asked Questions

Is Candy AI a scam?

No. It is a registered company delivering the service it sells. The complaints concern pricing transparency, refund handling and cancellation, which are business practice issues rather than fraud.

Why can’t I get a refund?

The published window is 24 hours for many non-EU and non-UK purchases, with usage limits. If you are in the EU or UK, check your statutory rights, which may be broader than the company’s stated policy.

Will deleting my account stop the charges?

Do not rely on it. Cancel the subscription first and keep the confirmation, then delete the account if you still want to.

The Practical Call

If you have an unexplained charge, look for EverAI on the statement and log in with the email on the receipt. That resolves most of these cases in five minutes.

If you are considering signing up, the honest warning is not about safety. It is that the subscription price is not the price. Work out roughly how many images you would generate in a month, price the token packs for that volume, and compare that number against the alternatives before you commit. Our roundup of Candy AI alternatives covers platforms with different pricing structures, and some bundle generation into the subscription instead of metering it.

Whatever you pick, take the shortest plan available first, and screenshot every step of the billing process. That advice costs nothing and it is the difference between a dispute you can win and one you cannot.

Published: September 10, 2026